乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-08-19: 细节已通知厂商并且等待厂商处理中 2015-08-21: cncert国家互联网应急中心暂未能联系到相关单位,细节仅向通报机构公开 2015-08-24: 细节向第三方安全合作伙伴开放 2015-10-15: 细节向核心白帽子及相关领域专家公开 2015-10-25: 细节向普通白帽子公开 2015-11-04: 细节向实习白帽子公开 2015-11-19: 细节向公众公开
众多案例,涉及政府&企业。
同个系统发现被标注多家厂商名称,案例为证。该呼叫无需登录下存在十一个文件存在SQL注入漏洞。(其中发现案例最多的是“深圳市集时通讯有限公司”的呼叫系统)
第一处:POST /justadmin/index.html HTTP/1.1Content-Length: 87Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: **.**.**.**:81/Cookie: PHPSESSID=ffe0iqfmilab2mb60355k4ra00Host: **.**.**.**:81Connection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*username=admin&password=admin参数password和参数username第二处POST /justadmin/include/status.html HTTP/1.1Content-Length: 79Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: **.**.**.**:81/Cookie: PHPSESSID=ffe0iqfmilab2mb60355k4ra00Host: **.**.**.**:81Connection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*username=admin&password=admin参数password和参数username第三处POST /justadmin/include/javascript/status.html HTTP/1.1Content-Length: 79Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: **.**.**.**:81/Cookie: PHPSESSID=ffe0iqfmilab2mb60355k4ra00Host: **.**.**.**:81Connection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*username=admin&password=admin参数password和参数username第四处:POST /justadmin/include/javascript/ HTTP/1.1Content-Length: 79Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: **.**.**.**:81/Cookie: PHPSESSID=ffe0iqfmilab2mb60355k4ra00Host: **.**.**.**:81Connection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*username=admin&password=admin参数password和参数username第五处:POST /justadmin/include/images/status.html HTTP/1.1Content-Length: 79Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: **.**.**.**/Cookie: PHPSESSID=ffe0iqfmilab2mb60355k4ra00Host: **.**.**.**Connection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*username=admin&password=admin参数password和参数username第六处:POST /justadmin/include/images/alert/status.html HTTP/1.1Content-Length: 79Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: **.**.**.**:8000/Cookie: PHPSESSID=ffe0iqfmilab2mb60355k4ra00Host: **.**.**.**:8000Connection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*username=admin&password=admin参数password和参数username第七处:POST /justadmin/include/images/alert/ HTTP/1.1Content-Length: 79Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: **.**.**.**:81/Cookie: PHPSESSID=ffe0iqfmilab2mb60355k4ra00Host: **.**.**.**:81Connection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*username=admin&password=admin参数password和参数username第八处:POST /justadmin/include/images/ HTTP/1.1Content-Length: 79Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: **.**.**.**:81/Cookie: PHPSESSID=ffe0iqfmilab2mb60355k4ra00Host: **.**.**.**:81Connection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*username=admin&password=admin参数password和参数username第九处:POST /justadmin/include/css/status.html HTTP/1.1Content-Length: 79Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: **.**.**.**:81/Cookie: PHPSESSID=ffe0iqfmilab2mb60355k4ra00Host: **.**.**.**:81Connection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*username=admin&password=admin参数password和参数username第十处:POST /justadmin/include/css/ HTTP/1.1Content-Length: 79Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: **.**.**.**:81/Cookie: PHPSESSID=ffe0iqfmilab2mb60355k4ra00Host: **.**.**.**:81Connection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*username=admin&password=admin参数password和参数username第十一处:POST /justadmin/include/ HTTP/1.1Content-Length: 79Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: **.**.**.**:81/Cookie: PHPSESSID=ffe0iqfmilab2mb60355k4ra00Host: **.**.**.**:81Connection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*username=admin&password=admin参数password和参数username
案例:
欢迎您使用集时通讯呼叫中心**.**.**.**:81/ 版权所有:深圳市集时通讯有限公司**.**.**.**/**.**.**.**:81/**.**.**.**/**.**.**.**:81/**.**.**.**/**.**.**.**:81/**.**.**.**/**.**.**.**:81/**.**.**.**:81/**.**.**.**:8000/**.**.**.**/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**/**.**.**.**:81/**.**.**.**:8080/**.**.**.**/**.**.**.**:81/**.**.**.**:81/**.**.**.**:8081/**.**.**.**:81/**.**.**.**:81/**.**.**.**:88/北京华创联泰科技有限公司_"欢迎您使用华创联泰呼叫中心"**.**.**.**/**.**.**.**/**.**.**.**:81/"欢迎您使用企业专用呼叫中心"**.**.**.**:81/**.**.**.**/**.**.**.**:81/**.**.**.**/**.**.**.**/**.**.**.**/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/"欢迎您使用呼叫中心"**.**.**.**:81/**.**.**.**/**.**.**.**/ 版权所有:广州艾讯计算机信息科技有限公司**.**.**.**:81/**.**.**.**:81/ 版权所有:深圳市腾龙信科有限公司**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**:81/**.**.**.**/**.**.**.**:81/**.**.**.**/"欢迎您使用益倍嘉呼叫中心"**.**.**.**:81/ 版权所有:上海益倍嘉信息技术有限公司"欢迎您使用贵宾专用语音呼叫中心"**.**.**.**:81/"欢迎您使用北京宇阳通信呼叫中心"**.**.**.**/"广西区食品药品投诉举报平台-12331呼叫中心"**.**.**.**/"欢迎您使用邵东县12345政府服务热线"**.**.**.**:81/欢迎您使用恒韵网络呼叫中心**.**.**.**:8080/欢迎您使用NICEUC呼叫中心**.**.**.**:81/欢迎您使用诺赛尔科技呼叫中心**.**.**.**:81/甘肃居家养老服务中心**.**.**.**/成都居家养老服务中心**.**.**.**/欢迎您使用12345政府服务热线**.**.**.**:8080/欢迎您使用北京德汇信呼叫中心**.**.**.**/欢迎您使用湖南96580呼叫中心**.**.**.**/
过滤
危害等级:高
漏洞Rank:15
确认时间:2015-08-21 16:52
CNVD确认所述情况,已经转由CNCERT下发给对应分中心,由其后续协调网站管理单位处置。
暂无